Event Description

Endpoint security has changed a lot in the last five years. As an industry, we went from accepting signature-based endpoint protection to assuming that protections will fail. This shift in endpoint protection strategy followed revelations about nation-state threat actors and their advanced tactics, techniques, and procedures to evade legacy protection measures.

Today, the endpoint market provides a wide array of endpoint protection platforms (EPP) as well as endpoint detection and response (EDR) options for customers to consider. EPP has largely done away with signatures as a prevention mechanism and now rely on heuristics, behavioral analysis, and run-time process evaluation to prevent threats to an endpoint. The EDR market has enabled security analysts with visibility and endpoint telemetry that was formerly only available to forensics analysts. The combination of these two endpoint security capabilities provides additional peace of mind to security leaders but requires analysts to have more skills in interpreting and triaging security events.

In this month’s virtual event, we will be highlighting some of the key components of endpoint security platforms and discuss the pros and cons of each. We’ll then spend some time diving into the specific use cases for detection, prevention, and investigation.

CPE certification for the Endpoint Security Event is being administered by Carahsoft Technology Corp. Carahsoft is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education of the National Registry of CPE Sponsors. State boards of accountancy have final authority in the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website www.nasbaregistry.org.